By default, all clusters added to Carbon Black EDR Unified View by an administrator are enabled for all users who have a legitimate shared or individual API token. However, each user can limit their global searches to a particular set of clusters by disabling some clusters.

Procedure

  1. On the Username menu in the upper right corner of the console, click My Profile.
  2. Click My Clusters.
  3. Click to enable (include) or disable (exclude) clusters.